@xfey/tutti 0.1.119 → 0.1.120

package/node_modules/@tutti/relay-client/dist/host-control.js

@@ -1,5 +1,5 @@
 import { createIdempotencyKey, } from "@tutti/shared/ids";
-import { isPlatformOutboundHandoffResponse, } from "@tutti/shared/schemas/internal";
+import { isPlatformOutboundHandoffResponse, isHostDelegationProjection, isManagedProjectBootstrap, } from "@tutti/shared/schemas/internal";
 export class RelayHostControlClientError extends Error {
     code;
     retryable;
@@ -91,6 +91,12 @@ function createRegisterPayload(options) {
             account_handoff_token: options.accountHandoffToken,
         };
     }
+    if (options.managedBootstrap !== undefined) {
+        if (options.accountHandoffToken !== undefined ||
+            !isManagedProjectBootstrap(options.managedBootstrap))
+            throw new RelayHostControlClientError("relay_registration_failed", "Managed Host authority input is invalid", false);
+        payload.managed_bootstrap = options.managedBootstrap;
+    }
     return payload;
 }
 function createRefreshJoinTokenPayload(options) {
@@ -199,6 +205,10 @@ function assertRegistrationResponse(value) {
         throw new RelayHostControlClientError("relay_registration_failed", "Relay host registration response is invalid", false);
     }
     const dispositionKind = stringField(value.disposition, "kind");
+    if (isRecord(value.result) &&
+        value.result.managed_authority !== undefined &&
+        !isHostDelegationProjection(value.result.managed_authority))
+        throw new RelayHostControlClientError("relay_registration_failed", "Managed Host authority response is invalid", false);
     if (dispositionKind !== "registered" && dispositionKind !== "interrupted") {
         throw new RelayHostControlClientError("relay_registration_failed", "Relay host registration disposition is invalid", false);
     }
@@ -249,6 +259,7 @@ export async function registerRelayHostConnection(options) {
     const fetchImpl = options.fetch ?? fetch;
     const commandId = options.commandId ?? createIdempotencyKey();
     const issuedAt = options.issuedAt ?? new Date();
+    const payload = createRegisterPayload(options);
     const response = await (async () => {
         try {
             return await fetchWithTimeout(fetchImpl, registrationUrl(options.relayUrl), {
@@ -260,7 +271,7 @@ export async function registerRelayHostConnection(options) {
                 body: JSON.stringify({
                     command_id: commandId,
                     issued_at: issuedAt.toISOString(),
-                    payload: createRegisterPayload(options),
+                    payload,
                 }),
             }, options.timeoutMs ?? DEFAULT_TIMEOUT_MS, options.signal);
         }
@@ -278,7 +289,19 @@ export async function registerRelayHostConnection(options) {
         }
         throw new RelayHostControlClientError(response.status >= 500 ? "relay_unavailable" : "relay_registration_failed", `Relay host registration failed with HTTP ${response.status}`, response.status >= 500, response.status, relayErrorCode);
     }
-    return assertRegistrationResponse(await response.json());
+    const result = assertRegistrationResponse(await response.json());
+    if (options.managedBootstrap !== undefined &&
+        result.result !== undefined &&
+        result.result.managed_authority === undefined)
+        throw new RelayHostControlClientError("relay_registration_failed", "Relay does not support managed Host authority", false);
+    if (options.managedBootstrap !== undefined &&
+        result.result?.managed_authority !== undefined &&
+        (result.result.managed_authority.installation_ref !==
+            options.managedBootstrap.installation_ref ||
+            result.result.managed_authority.relay_project_ref !==
+                result.result.relay_project?.relay_project_ref))
+        throw new RelayHostControlClientError("relay_registration_failed", "Managed Host authority response does not match registration", false);
+    return result;
 }
 export async function refreshRelayJoinToken(options) {
     const fetchImpl = options.fetch ?? fetch;

package/node_modules/@tutti/relay-client/dist/index.d.ts

@@ -1,4 +1,5 @@
 export * from "./host-control.js";
 export * from "./tunnel.js";
 export * from "./external-references.js";
+export * from "./project-authority.js";
 //# sourceMappingURL=index.d.ts.map

package/node_modules/@tutti/relay-client/dist/index.js

@@ -1,4 +1,5 @@
 export * from "./host-control.js";
 export * from "./tunnel.js";
 export * from "./external-references.js";
+export * from "./project-authority.js";
 //# sourceMappingURL=index.js.map

package/node_modules/@tutti/relay-client/dist/project-authority.d.ts

@@ -0,0 +1,75 @@
+import { type HostDelegationStatusBody, type NativeCreationProof } from "@tutti/shared/schemas/internal";
+export declare class NativeAuthorityTransportError extends Error {
+    readonly code: string;
+    readonly status?: number | undefined;
+    readonly requestId?: string | undefined;
+    constructor(code: string, status?: number | undefined, requestId?: string | undefined);
+}
+type Transport = {
+    relayUrl: string;
+    fetchImpl?: typeof fetch;
+    signal?: AbortSignal;
+};
+export declare function validateNativeCreationAuthority(options: Transport & {
+    body: NativeCreationProof;
+}): Promise<{
+    reason_code: "validation_started" | "validation_succeeded" | "validation_route_unavailable" | "validation_http_rejected" | "validation_response_invalid" | "validation_transport_unknown" | "validation_interrupted";
+    state: "failed" | "started" | "succeeded" | "unknown";
+    installation_ref: string;
+    project_id: string;
+    tier: "light" | "high" | "max";
+    creation_ref: string;
+    route_ref: string;
+    http_status: number | null;
+}>;
+export declare function readNativeCreationAuthority(options: Transport & {
+    body: NativeCreationProof;
+}): Promise<{
+    authority?: {
+        expires_at: null;
+        state: "active";
+        relay_project_ref: string;
+        installation_ref: string;
+        funding_kind: "trial";
+        tier: "light" | "high" | "max";
+        delegation_ref: string;
+        grant_ref: string;
+        model_access: "runtime_authority_required" | "not_enabled";
+    };
+    account_ref: string;
+    request_ref: string;
+    creation: {
+        relay_project_ref?: string;
+        expires_at: string;
+        state: "expired" | "prepared" | "activated" | "revoked";
+        installation_ref: string;
+        project_id: string;
+        tier: "light" | "high" | "max";
+        surface: "standalone" | "feishu";
+        creation_ref: string;
+    };
+}>;
+export declare function readNativeHostAuthority(options: Transport & {
+    body: HostDelegationStatusBody;
+}): Promise<{
+    expires_at: null;
+    state: "active";
+    relay_project_ref: string;
+    installation_ref: string;
+    funding_kind: "trial";
+    tier: "light" | "high" | "max";
+    delegation_ref: string;
+    grant_ref: string;
+    model_access: "runtime_authority_required" | "not_enabled";
+}>;
+export declare function authorizeNativeModelRuntime(options: Transport & {
+    body: HostDelegationStatusBody;
+}): Promise<{
+    expires_at: number;
+    authorization: string;
+    tier: "light" | "high" | "max";
+    delegation_ref: string;
+    control_origin: string;
+}>;
+export {};
+//# sourceMappingURL=project-authority.d.ts.map

package/node_modules/@tutti/relay-client/dist/project-authority.js

@@ -0,0 +1,140 @@
+import { Value } from "@sinclair/typebox/value";
+import { HostDelegationProjectionSchema, HostDelegationStatusBodySchema, NativeCreationProofSchema, NativeCreationStatusSchema, CreationValidationResultSchema, NativeRuntimeAuthorizationSchema, } from "@tutti/shared/schemas/internal";
+export class NativeAuthorityTransportError extends Error {
+    code;
+    status;
+    requestId;
+    constructor(code, status, requestId) {
+        super(code);
+        this.code = code;
+        this.status = status;
+        this.requestId = requestId;
+        this.name = "NativeAuthorityTransportError";
+    }
+}
+const safeReasons = new Set([
+    "account_session_required",
+    "account_authority_inactive",
+    "project_owner_required",
+    "creation_proof_invalid",
+    "creation_authority_revoked",
+    "creation_authority_expired",
+    "creation_authority_conflict",
+    "creation_policy_retired",
+    "installation_proof_invalid",
+    "host_delegation_invalid",
+    "host_delegation_inactive",
+    "trial_consent_inactive",
+    "creation_validation_required",
+    "creation_validation_unavailable",
+    "creation_validation_busy",
+    "creation_validation_invalid_response",
+    "managed_trial_not_enabled",
+]);
+async function request(options, path, body, schema, timeoutMs = 15_000) {
+    try {
+        const origin = new URL(options.relayUrl);
+        if (origin.username ||
+            origin.password ||
+            origin.search ||
+            origin.hash ||
+            origin.pathname !== "/" ||
+            !(origin.protocol === "https:" ||
+                (origin.protocol === "http:" && ["127.0.0.1", "[::1]"].includes(origin.hostname))))
+            throw new NativeAuthorityTransportError("managed_relay_origin_invalid");
+        const timeout = AbortSignal.timeout(timeoutMs);
+        const response = await (options.fetchImpl ?? fetch)(new URL(path, origin), {
+            method: "POST",
+            redirect: "error",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify(body),
+            signal: options.signal === undefined ? timeout : AbortSignal.any([timeout, options.signal]),
+        });
+        const id = response.headers.get("x-tutti-request-id");
+        const requestId = id !== null && /^[A-Za-z0-9_-]{1,100}$/.test(id) ? id : undefined;
+        const reader = response.body?.getReader();
+        if (!reader)
+            throw new NativeAuthorityTransportError("managed_authority_invalid_response", response.status, requestId);
+        const chunks = [];
+        let size = 0;
+        try {
+            for (;;) {
+                const part = await reader.read();
+                if (part.done)
+                    break;
+                if (!(part.value instanceof Uint8Array))
+                    throw new NativeAuthorityTransportError("managed_authority_invalid_response", response.status, requestId);
+                size += part.value.byteLength;
+                if (size > 16 * 1024)
+                    throw new NativeAuthorityTransportError("managed_authority_invalid_response", response.status, requestId);
+                chunks.push(part.value);
+            }
+        }
+        finally {
+            await reader.cancel().catch(() => undefined);
+            reader.releaseLock();
+        }
+        let raw;
+        try {
+            raw = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+        }
+        catch {
+            throw new NativeAuthorityTransportError("managed_authority_invalid_response", response.status, requestId);
+        }
+        if (!response.ok) {
+            const code = raw?.error?.code;
+            throw new NativeAuthorityTransportError(typeof code === "string" && safeReasons.has(code) ? code : "managed_authority_unavailable", response.status, requestId);
+        }
+        if (!Value.Check(schema, raw))
+            throw new NativeAuthorityTransportError("managed_authority_invalid_response", response.status, requestId);
+        return raw;
+    }
+    catch (error) {
+        throw error instanceof NativeAuthorityTransportError
+            ? error
+            : new NativeAuthorityTransportError("managed_authority_unavailable");
+    }
+}
+export async function validateNativeCreationAuthority(options) {
+    if (!Value.Check(NativeCreationProofSchema, options.body))
+        throw new NativeAuthorityTransportError("managed_authority_invalid_request");
+    const result = await request(options, "/host-control/v1/managed-authority/validate", options.body, CreationValidationResultSchema, 60_000);
+    if (result.project_id !== options.body.project_id ||
+        result.installation_ref !== options.body.installation_ref)
+        throw new NativeAuthorityTransportError("managed_authority_invalid_response");
+    return result;
+}
+export async function readNativeCreationAuthority(options) {
+    if (!Value.Check(NativeCreationProofSchema, options.body))
+        throw new NativeAuthorityTransportError("managed_authority_invalid_request");
+    const result = await request(options, "/host-control/v1/managed-authority/preparation", options.body, NativeCreationStatusSchema);
+    if (result.request_ref !== options.body.request_ref ||
+        result.creation.project_id !== options.body.project_id ||
+        result.creation.installation_ref !== options.body.installation_ref ||
+        (result.creation.state === "activated") !== (result.authority !== undefined) ||
+        (result.authority !== undefined &&
+            (result.authority.tier !== result.creation.tier ||
+                result.authority.installation_ref !== options.body.installation_ref ||
+                result.authority.relay_project_ref !== result.creation.relay_project_ref)))
+        throw new NativeAuthorityTransportError("managed_authority_invalid_response");
+    return result;
+}
+export async function readNativeHostAuthority(options) {
+    if (!Value.Check(HostDelegationStatusBodySchema, options.body))
+        throw new NativeAuthorityTransportError("managed_authority_invalid_request");
+    const result = await request(options, "/host-control/v1/managed-authority/status", options.body, HostDelegationProjectionSchema);
+    if (result.delegation_ref !== options.body.delegation_ref ||
+        result.relay_project_ref !== options.body.relay_project_ref ||
+        result.installation_ref !== options.body.installation_ref)
+        throw new NativeAuthorityTransportError("managed_authority_invalid_response");
+    return result;
+}
+export async function authorizeNativeModelRuntime(options) {
+    if (!Value.Check(HostDelegationStatusBodySchema, options.body))
+        throw new NativeAuthorityTransportError("managed_authority_invalid_request");
+    const result = await request(options, "/host-control/v1/managed-authority/runtime", options.body, NativeRuntimeAuthorizationSchema);
+    if (result.delegation_ref !== options.body.delegation_ref)
+        throw new NativeAuthorityTransportError("managed_authority_invalid_response");
+    return result;
+}
+//# sourceMappingURL=project-authority.js.map

package/node_modules/@tutti/shared/dist/ids/index.d.ts

@@ -28,6 +28,13 @@ export declare const ID_PREFIXES: {
     readonly joinToken: "join_token_";
     readonly notice: "notice_";
     readonly controlPlaneIntent: "intent_";
+    readonly managedCredential: "managed_credential_";
+    readonly managedSession: "managed_session_";
+    readonly managedDevice: "managed_device_";
+    readonly managedCreation: "managed_creation_";
+    readonly hostInstallation: "host_installation_";
+    readonly hostDelegation: "host_delegation_";
+    readonly projectModelGrant: "project_model_grant_";
 };
 export type IdPrefix = (typeof ID_PREFIXES)[keyof typeof ID_PREFIXES];
 export type PrefixedId<TPrefix extends string> = `${TPrefix}${string}`;

package/node_modules/@tutti/shared/dist/ids/index.js

@@ -30,6 +30,13 @@ export const ID_PREFIXES = {
     joinToken: "join_token_",
     notice: "notice_",
     controlPlaneIntent: "intent_",
+    managedCredential: "managed_credential_",
+    managedSession: "managed_session_",
+    managedDevice: "managed_device_",
+    managedCreation: "managed_creation_",
+    hostInstallation: "host_installation_",
+    hostDelegation: "host_delegation_",
+    projectModelGrant: "project_model_grant_",
 };
 export function createPrefixedId(prefix) {
     return `${prefix}${ulid()}`;

package/node_modules/@tutti/shared/dist/schemas/api/index.d.ts

@@ -1,4 +1,5 @@
 export * from "./openapi.js";
+export * from "./managed-account.js";
 export type * from "./types.js";
 export { ARTIFACT_FEEDBACK_MAX_ANNOTATIONS, ARTIFACT_FEEDBACK_MAX_AUTHORED_TEXT_LENGTH, ARTIFACT_FEEDBACK_MAX_COMMENT_LENGTH, ARTIFACT_FEEDBACK_MAX_SERIALIZED_BYTES, ARTIFACT_FEEDBACK_MAX_SUMMARY_LENGTH, ArtifactElementAnchorSchema, ArtifactElementKindSchema, ArtifactElementTargetSchema, ArtifactFeedbackAnnotationSchema, ArtifactFeedbackCommandSchema, ArtifactFeedbackRefSchema, ArtifactSemanticContextSchema, ArtifactSemanticSnapshotSchema, ArtifactSemanticStateSchema, } from "./artifact-feedback.js";
 export { CompleteDesktopEntryContinuationBodySchema, CompleteDesktopEntryContinuationResponseSchema, CreateDesktopEntryContinuationResponseSchema, DESKTOP_ENTRY_COMPLETION_TOKEN_LENGTH, DESKTOP_ENTRY_PAYLOAD_KEY_LENGTH, DESKTOP_ENTRY_SEALED_IV_LENGTH, DesktopEntryCompletionTokenSchema, DesktopEntryContinuationPendingProjectionSchema, DesktopEntryContinuationReadyProjectionSchema, DesktopEntryPayloadKeySchema, GetDesktopEntryContinuationResponseSchema, MAX_DESKTOP_ENTRY_SEALED_CIPHERTEXT_LENGTH, SealedDesktopEntryPayloadSchema, } from "./desktop-entry-continuations.js";

package/node_modules/@tutti/shared/dist/schemas/api/index.js

@@ -1,4 +1,5 @@
 export * from "./openapi.js";
+export * from "./managed-account.js";
 export { ARTIFACT_FEEDBACK_MAX_ANNOTATIONS, ARTIFACT_FEEDBACK_MAX_AUTHORED_TEXT_LENGTH, ARTIFACT_FEEDBACK_MAX_COMMENT_LENGTH, ARTIFACT_FEEDBACK_MAX_SERIALIZED_BYTES, ARTIFACT_FEEDBACK_MAX_SUMMARY_LENGTH, ArtifactElementAnchorSchema, ArtifactElementKindSchema, ArtifactElementTargetSchema, ArtifactFeedbackAnnotationSchema, ArtifactFeedbackCommandSchema, ArtifactFeedbackRefSchema, ArtifactSemanticContextSchema, ArtifactSemanticSnapshotSchema, ArtifactSemanticStateSchema, } from "./artifact-feedback.js";
 export { CompleteDesktopEntryContinuationBodySchema, CompleteDesktopEntryContinuationResponseSchema, CreateDesktopEntryContinuationResponseSchema, DESKTOP_ENTRY_COMPLETION_TOKEN_LENGTH, DESKTOP_ENTRY_PAYLOAD_KEY_LENGTH, DESKTOP_ENTRY_SEALED_IV_LENGTH, DesktopEntryCompletionTokenSchema, DesktopEntryContinuationPendingProjectionSchema, DesktopEntryContinuationReadyProjectionSchema, DesktopEntryPayloadKeySchema, GetDesktopEntryContinuationResponseSchema, MAX_DESKTOP_ENTRY_SEALED_CIPHERTEXT_LENGTH, SealedDesktopEntryPayloadSchema, } from "./desktop-entry-continuations.js";
 export { LOCAL_CONSOLE_ACCOUNT_HANDOFF_TOKEN_MAX_LENGTH, LOCAL_CONSOLE_ACCOUNT_HANDOFF_TOKEN_MIN_LENGTH, RegisterLocalConsoleAccountHandoffBodySchema, RegisterLocalConsoleAccountHandoffResponseSchema, } from "./local-console-account-handoffs.js";

package/node_modules/@tutti/shared/dist/schemas/api/managed-account.d.ts

@@ -0,0 +1,35 @@
+import { type Static } from "@sinclair/typebox";
+export declare const ManagedAccountUsageSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+    state: import("@sinclair/typebox").TLiteral<"not_initialized">;
+    unit: import("@sinclair/typebox").TLiteral<"newapi_quota">;
+}>, import("@sinclair/typebox").TObject<{
+    state: import("@sinclair/typebox").TLiteral<"ready">;
+    unit: import("@sinclair/typebox").TLiteral<"newapi_quota">;
+    remaining: import("@sinclair/typebox").TInteger;
+    used: import("@sinclair/typebox").TInteger;
+    request_count: import("@sinclair/typebox").TInteger;
+}>]>;
+export type ManagedAccountUsage = Static<typeof ManagedAccountUsageSchema>;
+export declare const ManagedAccountOverviewSchema: import("@sinclair/typebox").TObject<{
+    delegations: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        delegation_ref: import("@sinclair/typebox").TString;
+        grant_ref: import("@sinclair/typebox").TString;
+        installation_ref: import("@sinclair/typebox").TString;
+        relay_project_ref: import("@sinclair/typebox").TString;
+        project_name: import("@sinclair/typebox").TString;
+        surface: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"standalone">, import("@sinclair/typebox").TLiteral<"feishu">]>;
+        tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
+        created_at: import("@sinclair/typebox").TString;
+        state: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"active">, import("@sinclair/typebox").TLiteral<"revoked">]>;
+        downstream_keys: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"not_requested">, import("@sinclair/typebox").TLiteral<"pending">, import("@sinclair/typebox").TLiteral<"confirmed">]>;
+    }>>;
+    sessions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        session_ref: import("@sinclair/typebox").TString;
+        current: import("@sinclair/typebox").TBoolean;
+        created_at: import("@sinclair/typebox").TString;
+        expires_at: import("@sinclair/typebox").TString;
+    }>>;
+    truncated: import("@sinclair/typebox").TBoolean;
+}>;
+export type ManagedAccountOverview = Static<typeof ManagedAccountOverviewSchema>;
+//# sourceMappingURL=managed-account.d.ts.map

package/node_modules/@tutti/shared/dist/schemas/api/managed-account.js

@@ -0,0 +1,41 @@
+import { Type } from "@sinclair/typebox";
+import { ID_PREFIXES, ULID_BODY_PATTERN } from "../../ids/index.js";
+import { RelayProjectRefSchema, RelayAccountSessionRefSchema } from "../domain/index.js";
+const ref = (prefix) => Type.String({ pattern: `^${prefix}${ULID_BODY_PATTERN}$` });
+const timestamp = Type.String({ maxLength: 30 });
+export const ManagedAccountUsageSchema = Type.Union([
+    Type.Object({ state: Type.Literal("not_initialized"), unit: Type.Literal("newapi_quota") }, { additionalProperties: false }),
+    Type.Object({
+        state: Type.Literal("ready"),
+        unit: Type.Literal("newapi_quota"),
+        remaining: Type.Integer(),
+        used: Type.Integer({ minimum: 0 }),
+        request_count: Type.Integer({ minimum: 0 }),
+    }, { additionalProperties: false }),
+]);
+export const ManagedAccountOverviewSchema = Type.Object({
+    delegations: Type.Array(Type.Object({
+        delegation_ref: ref(ID_PREFIXES.hostDelegation),
+        grant_ref: ref(ID_PREFIXES.projectModelGrant),
+        installation_ref: ref(ID_PREFIXES.hostInstallation),
+        relay_project_ref: RelayProjectRefSchema,
+        project_name: Type.String(),
+        surface: Type.Union([Type.Literal("standalone"), Type.Literal("feishu")]),
+        tier: Type.Union([Type.Literal("light"), Type.Literal("high"), Type.Literal("max")]),
+        created_at: timestamp,
+        state: Type.Union([Type.Literal("active"), Type.Literal("revoked")]),
+        downstream_keys: Type.Union([
+            Type.Literal("not_requested"),
+            Type.Literal("pending"),
+            Type.Literal("confirmed"),
+        ]),
+    }, { additionalProperties: false }), { maxItems: 100 }),
+    sessions: Type.Array(Type.Object({
+        session_ref: RelayAccountSessionRefSchema,
+        current: Type.Boolean(),
+        created_at: timestamp,
+        expires_at: timestamp,
+    }, { additionalProperties: false }), { maxItems: 50 }),
+    truncated: Type.Boolean(),
+}, { additionalProperties: false });
+//# sourceMappingURL=managed-account.js.map

package/node_modules/@tutti/shared/dist/schemas/api/provider-config.d.ts

@@ -3,14 +3,14 @@ export declare const ProviderModelNameSchema: import("@sinclair/typebox").TStrin
 export declare const ProviderConfigInvalidReasonCodeSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"provider_auth_invalid">, import("@sinclair/typebox").TLiteral<"provider_quota_or_billing_required">, import("@sinclair/typebox").TLiteral<"provider_rate_limited">, import("@sinclair/typebox").TLiteral<"provider_model_unavailable">, import("@sinclair/typebox").TLiteral<"provider_network_error">, import("@sinclair/typebox").TLiteral<"unknown">]>;
 export declare const ProviderUnavailableReasonCodeSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"provider_auth_invalid">, import("@sinclair/typebox").TLiteral<"provider_quota_or_billing_required">, import("@sinclair/typebox").TLiteral<"provider_rate_limited">, import("@sinclair/typebox").TLiteral<"provider_model_unavailable">, import("@sinclair/typebox").TLiteral<"provider_network_error">, import("@sinclair/typebox").TLiteral<"unknown">]>;
 export declare const ProviderModelValidationFailureReasonSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"provider_auth_invalid">, import("@sinclair/typebox").TLiteral<"provider_quota_or_billing_required">, import("@sinclair/typebox").TLiteral<"provider_rate_limited">, import("@sinclair/typebox").TLiteral<"provider_model_unavailable">, import("@sinclair/typebox").TLiteral<"provider_network_error">]>;
-export declare const ProjectProviderUnavailableReasonSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"provider_not_configured">, import("@sinclair/typebox").TLiteral<"provider_config_invalid">, import("@sinclair/typebox").TLiteral<"provider_credential_missing">]>;
-export declare const ProviderModelDiscoveryUnavailableReasonSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"model_list_unavailable">, import("@sinclair/typebox").TLiteral<"model_list_empty">, import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"provider_not_configured">, import("@sinclair/typebox").TLiteral<"provider_config_invalid">, import("@sinclair/typebox").TLiteral<"provider_credential_missing">]>]>;
+export declare const ProjectProviderUnavailableReasonSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"managed_model_fixed">, import("@sinclair/typebox").TLiteral<"provider_not_configured">, import("@sinclair/typebox").TLiteral<"provider_config_invalid">, import("@sinclair/typebox").TLiteral<"provider_credential_missing">]>;
+export declare const ProviderModelDiscoveryUnavailableReasonSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"model_list_unavailable">, import("@sinclair/typebox").TLiteral<"model_list_empty">, import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"managed_model_fixed">, import("@sinclair/typebox").TLiteral<"provider_not_configured">, import("@sinclair/typebox").TLiteral<"provider_config_invalid">, import("@sinclair/typebox").TLiteral<"provider_credential_missing">]>]>;
 export declare const GetProviderModelsResponseSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
     status: import("@sinclair/typebox").TLiteral<"available">;
     models: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
 }>, import("@sinclair/typebox").TObject<{
     status: import("@sinclair/typebox").TLiteral<"unavailable">;
-    reason: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"model_list_unavailable">, import("@sinclair/typebox").TLiteral<"model_list_empty">, import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"provider_not_configured">, import("@sinclair/typebox").TLiteral<"provider_config_invalid">, import("@sinclair/typebox").TLiteral<"provider_credential_missing">]>]>;
+    reason: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"model_list_unavailable">, import("@sinclair/typebox").TLiteral<"model_list_empty">, import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"managed_model_fixed">, import("@sinclair/typebox").TLiteral<"provider_not_configured">, import("@sinclair/typebox").TLiteral<"provider_config_invalid">, import("@sinclair/typebox").TLiteral<"provider_credential_missing">]>]>;
 }>]>;
 export declare const UpdateProviderDefaultModelPayloadSchema: import("@sinclair/typebox").TObject<{
     default_model: import("@sinclair/typebox").TString;
@@ -29,7 +29,7 @@ export declare const UpdateProviderDefaultModelDispositionSchema: import("@sincl
     retryable: import("@sinclair/typebox").TBoolean;
 }>, import("@sinclair/typebox").TObject<{
     kind: import("@sinclair/typebox").TLiteral<"provider_unavailable">;
-    reason: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"provider_not_configured">, import("@sinclair/typebox").TLiteral<"provider_config_invalid">, import("@sinclair/typebox").TLiteral<"provider_credential_missing">]>;
+    reason: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"managed_model_fixed">, import("@sinclair/typebox").TLiteral<"provider_not_configured">, import("@sinclair/typebox").TLiteral<"provider_config_invalid">, import("@sinclair/typebox").TLiteral<"provider_credential_missing">]>;
 }>, import("@sinclair/typebox").TObject<{
     kind: import("@sinclair/typebox").TLiteral<"interrupted">;
     retry_with_new_command_id: import("@sinclair/typebox").TLiteral<true>;
@@ -38,6 +38,10 @@ export declare const UpdateProviderDefaultModelBodySchema: import("@sinclair/typ
 export declare const UpdateProviderDefaultModelResponseSchema: import("@sinclair/typebox").TSchema;
 export declare const ProviderConfigProjectionSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
     status: import("@sinclair/typebox").TLiteral<"not_configured">;
+}>, import("@sinclair/typebox").TObject<{
+    status: import("@sinclair/typebox").TLiteral<"managed">;
+    funding_kind: import("@sinclair/typebox").TLiteral<"trial">;
+    tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
 }>, import("@sinclair/typebox").TObject<{
     status: import("@sinclair/typebox").TLiteral<"configured">;
     provider: import("@sinclair/typebox").TLiteral<"openai">;

package/node_modules/@tutti/shared/dist/schemas/api/provider-config.js

@@ -24,6 +24,7 @@ export const ProviderModelValidationFailureReasonSchema = Type.Union([
     Type.Literal("provider_network_error"),
 ]);
 export const ProjectProviderUnavailableReasonSchema = Type.Union([
+    Type.Literal("managed_model_fixed"),
     Type.Literal("provider_not_configured"),
     Type.Literal("provider_config_invalid"),
     Type.Literal("provider_credential_missing"),
@@ -69,6 +70,11 @@ export const UpdateProviderDefaultModelBodySchema = commandEnvelopeSchema(Update
 export const UpdateProviderDefaultModelResponseSchema = commandResponseSchema(UpdateProviderDefaultModelDispositionSchema);
 export const ProviderConfigProjectionSchema = Type.Union([
     Type.Object({ status: Type.Literal("not_configured") }, { additionalProperties: false }),
+    Type.Object({
+        status: Type.Literal("managed"),
+        funding_kind: Type.Literal("trial"),
+        tier: Type.Union([Type.Literal("light"), Type.Literal("high"), Type.Literal("max")]),
+    }, { additionalProperties: false }),
     Type.Object({
         status: Type.Literal("configured"),
         provider: Type.Literal("openai"),

package/node_modules/@tutti/shared/dist/schemas/api/runtime-events.d.ts

@@ -537,6 +537,10 @@ export declare const ScratchpadUpdatedEventPayloadSchema: import("@sinclair/type
 export declare const ProviderConfigChangedEventPayloadSchema: import("@sinclair/typebox").TObject<{
     provider_config: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
         status: import("@sinclair/typebox").TLiteral<"not_configured">;
+    }>, import("@sinclair/typebox").TObject<{
+        status: import("@sinclair/typebox").TLiteral<"managed">;
+        funding_kind: import("@sinclair/typebox").TLiteral<"trial">;
+        tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
     }>, import("@sinclair/typebox").TObject<{
         status: import("@sinclair/typebox").TLiteral<"configured">;
         provider: import("@sinclair/typebox").TLiteral<"openai">;

package/node_modules/@tutti/shared/dist/schemas/internal/creation-validation.d.ts

@@ -0,0 +1,28 @@
+import { type Static } from "@sinclair/typebox";
+export declare const CreationValidationAuthoritySchema: import("@sinclair/typebox").TObject<{
+    version: import("@sinclair/typebox").TLiteral<1>;
+    audience: import("@sinclair/typebox").TLiteral<"tutti-creation-validation">;
+    issuer: import("@sinclair/typebox").TString;
+    account_ref: import("@sinclair/typebox").TString;
+    creation_ref: import("@sinclair/typebox").TString;
+    project_id: import("@sinclair/typebox").TString;
+    installation_ref: import("@sinclair/typebox").TString;
+    tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
+    creation_expires_at: import("@sinclair/typebox").TInteger;
+    nonce: import("@sinclair/typebox").TString;
+    issued_at: import("@sinclair/typebox").TInteger;
+    expires_at: import("@sinclair/typebox").TInteger;
+}>;
+export type CreationValidationAuthority = Static<typeof CreationValidationAuthoritySchema>;
+export declare const CreationValidationResultSchema: import("@sinclair/typebox").TObject<{
+    creation_ref: import("@sinclair/typebox").TString;
+    project_id: import("@sinclair/typebox").TString;
+    installation_ref: import("@sinclair/typebox").TString;
+    tier: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"light">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"max">]>;
+    route_ref: import("@sinclair/typebox").TString;
+    state: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"started">, import("@sinclair/typebox").TLiteral<"succeeded">, import("@sinclair/typebox").TLiteral<"failed">, import("@sinclair/typebox").TLiteral<"unknown">]>;
+    reason_code: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"validation_started">, import("@sinclair/typebox").TLiteral<"validation_succeeded">, import("@sinclair/typebox").TLiteral<"validation_route_unavailable">, import("@sinclair/typebox").TLiteral<"validation_http_rejected">, import("@sinclair/typebox").TLiteral<"validation_response_invalid">, import("@sinclair/typebox").TLiteral<"validation_transport_unknown">, import("@sinclair/typebox").TLiteral<"validation_interrupted">]>;
+    http_status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TNull, import("@sinclair/typebox").TInteger]>;
+}>;
+export type CreationValidationResult = Static<typeof CreationValidationResultSchema>;
+//# sourceMappingURL=creation-validation.d.ts.map

package/node_modules/@tutti/shared/dist/schemas/internal/creation-validation.js

@@ -0,0 +1,42 @@
+import { Type } from "@sinclair/typebox";
+import { IdempotencyKeySchema, ProjectIdSchema, RelayAccountRefSchema } from "../domain/index.js";
+import { HostInstallationRefSchema, ManagedCreationRefSchema, ManagedTierSchema, } from "./project-authority.js";
+// A fixed platform-funded connectivity probe, never a general model/key capability.
+export const CreationValidationAuthoritySchema = Type.Object({
+    version: Type.Literal(1),
+    audience: Type.Literal("tutti-creation-validation"),
+    issuer: Type.String({ minLength: 1, maxLength: 200 }),
+    account_ref: RelayAccountRefSchema,
+    creation_ref: ManagedCreationRefSchema,
+    project_id: ProjectIdSchema,
+    installation_ref: HostInstallationRefSchema,
+    tier: ManagedTierSchema,
+    creation_expires_at: Type.Integer({ minimum: 0 }),
+    nonce: IdempotencyKeySchema,
+    issued_at: Type.Integer({ minimum: 0 }),
+    expires_at: Type.Integer({ minimum: 0 }),
+}, { additionalProperties: false });
+export const CreationValidationResultSchema = Type.Object({
+    creation_ref: ManagedCreationRefSchema,
+    project_id: ProjectIdSchema,
+    installation_ref: HostInstallationRefSchema,
+    tier: ManagedTierSchema,
+    route_ref: Type.String({ pattern: "^[a-z0-9][a-z0-9-]{1,60}$" }),
+    state: Type.Union([
+        Type.Literal("started"),
+        Type.Literal("succeeded"),
+        Type.Literal("failed"),
+        Type.Literal("unknown"),
+    ]),
+    reason_code: Type.Union([
+        Type.Literal("validation_started"),
+        Type.Literal("validation_succeeded"),
+        Type.Literal("validation_route_unavailable"),
+        Type.Literal("validation_http_rejected"),
+        Type.Literal("validation_response_invalid"),
+        Type.Literal("validation_transport_unknown"),
+        Type.Literal("validation_interrupted"),
+    ]),
+    http_status: Type.Union([Type.Null(), Type.Integer({ minimum: 100, maximum: 599 })]),
+}, { additionalProperties: false });
+//# sourceMappingURL=creation-validation.js.map

package/node_modules/@tutti/shared/dist/schemas/internal/index.d.ts

@@ -78,4 +78,9 @@ export * from "./external-references.js";
 export * from "./platform-clarification-content.js";
 export * from "./platform-clarification.js";
 export * from "./feishu-connections.js";
+export * from "./managed-models.js";
+export * from "./project-authority.js";
+export * from "./creation-validation.js";
+export * from "./managed-runtime.js";
+export * from "./managed-account.js";
 //# sourceMappingURL=index.d.ts.map

package/node_modules/@tutti/shared/dist/schemas/internal/index.js

@@ -72,4 +72,9 @@ export * from "./external-references.js";
 export * from "./platform-clarification-content.js";
 export * from "./platform-clarification.js";
 export * from "./feishu-connections.js";
+export * from "./managed-models.js";
+export * from "./project-authority.js";
+export * from "./creation-validation.js";
+export * from "./managed-runtime.js";
+export * from "./managed-account.js";
 //# sourceMappingURL=index.js.map

package/node_modules/@tutti/shared/dist/schemas/internal/managed-account.d.ts

@@ -0,0 +1,12 @@
+import { type Static } from "@sinclair/typebox";
+export declare const ManagedAccountReadAuthoritySchema: import("@sinclair/typebox").TObject<{
+    version: import("@sinclair/typebox").TLiteral<1>;
+    audience: import("@sinclair/typebox").TLiteral<"tutti-managed-account-read">;
+    issuer: import("@sinclair/typebox").TString;
+    account_ref: import("@sinclair/typebox").TString;
+    nonce: import("@sinclair/typebox").TString;
+    issued_at: import("@sinclair/typebox").TInteger;
+    expires_at: import("@sinclair/typebox").TInteger;
+}>;
+export type ManagedAccountReadAuthority = Static<typeof ManagedAccountReadAuthoritySchema>;
+//# sourceMappingURL=managed-account.d.ts.map

package/node_modules/@tutti/shared/dist/schemas/internal/managed-account.js

@@ -0,0 +1,13 @@
+import { Type } from "@sinclair/typebox";
+import { RelayAccountRefSchema, IdempotencyKeySchema } from "../domain/index.js";
+// Read-only account ledger snapshot. Cannot create users, pin routes or issue keys.
+export const ManagedAccountReadAuthoritySchema = Type.Object({
+    version: Type.Literal(1),
+    audience: Type.Literal("tutti-managed-account-read"),
+    issuer: Type.String({ minLength: 1, maxLength: 200 }),
+    account_ref: RelayAccountRefSchema,
+    nonce: IdempotencyKeySchema,
+    issued_at: Type.Integer({ minimum: 0 }),
+    expires_at: Type.Integer({ minimum: 0 }),
+}, { additionalProperties: false });
+//# sourceMappingURL=managed-account.js.map